CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 351:

  Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

  A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.

  B. For R75 Security Gateways are created during the Security Management Server installation.

  C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.

  D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

  Correct Answer: D

• Question 352:

  Which of the following options is available with the GAiA cpconfig utility on a Management Server?

  A. Export setup

  B. DHCP Server configuration

  C. GUI Clients

  D. Time and Date

  Correct Answer: C

• Question 353:

  ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

  A. Export setup

  B. DHCP Server configuration

  C. Time and Date

  D. GUI Clients

  Correct Answer: D

• Question 354:

  Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

  A. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.

  B. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server

  C. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.

  D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

  Correct Answer: A

• Question 355:

  Where can you find the Check Point's SNMP MIB file?

  A. $CPDIR/lib/snmp/chkpt.mib

  B. $FWDIR/conf/snmp.mib

  C. It is obtained only by request from the TAC.

  D. There is no specific MIB file for Check Point products.

  Correct Answer: A

• Question 356:

  You want to generate a cpinfo file via CLI on a system running GAiA;

  This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

  A. No action is needed because cpshell has a timeout of one hour by default.

  B. Log in as the default user expert and start cpinfo.

  C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.

  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

  Correct Answer: D

• Question 357:

  Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

  A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.

  B. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.

  C. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.

  D. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

  Correct Answer: B

• Question 358:

  What is the officially accepted diagnostic tool for IP Appliance Support?

  A. ipsoinfo

  B. CST

  C. uag-diag

  D. cpinfo

  Correct Answer: B

• Question 359:

  Your company is running Security Management Server R80 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator

  B. Using SmartDashboard or cpconfig

  C. Using the Web console on GAiA under Product configuration, select Administrators

  D. Using cpconfig on the Security Management Server, choose Administrators

  Correct Answer: A

• Question 360:

  You have a diskless appliance platform. How do you keep swap file wear to a minimum?

  A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

  B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

  C. Use PRAM flash devices, eliminating the longevity.

  D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

  Correct Answer: D